Banquet: Short and Fast Signatures from AES

Baum, Carsten; Guilhem, Cyprien Delpech de Saint; Kales, Daniel; Orsini, Emmanuela; Schöll, Peter; Zaverucha, Greg

doi:10.1007/978-3-030-75245-3_11

Cited by 34 publications

(10 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The proof size depends directly on the number of multiplications ("ANDž gates) in the circuit , therefore, ZKB++ and KKW use the non-standard block cipher LowMC [2], which has a low multiplicative complexity. The works [54], [12] use (MPC-in-the-head), but employ the standard AES as a one-way function . Low-degree testing [14] is an alternative to MPC-in-the-head to construct symmetric-based ZKPs and is implement in ZKPs such as Ligero++ [22], ZK-STARK [13] and Aurora [14].…”

Section: Important Zero-knowledge Paradigms Underlying Eficient Exoti...mentioning

confidence: 99%

A Survey on Exotic Signatures for Post-quantum Blockchain: Challenges and Research Directions

et al. 2023

View full text Add to dashboard Cite

Blockchain technology provides efficient and secure solutions to various online activities by utilizing a wide range of cryptographic tools. In this paper, we survey the existing literature on post-quantum secure digital signatures that possess exotic advanced features and which are crucial cryptographic tools used in the blockchain ecosystem for (i) account management, (ii) consensus efficiency, (iii) empowering scriptless blockchain, and (iv) privacy. The exotic signatures that we particularly focus on in this work are the following: multi-/aggregate, threshold, adaptor, blind and ring signatures. Herein the term exotic refers to signatures with properties which are not just beyond the norm for signatures e.g. unforgeability, but also imbue new forms of functionalities. Our treatment of such exotic signatures includes discussions on existing challenges and future research directions in the post-quantum space. We hope that this article will help to foster further research to make post-quantum cryptography more accessible so that blockchain systems can be made ready in advance of the approaching quantum threats.

show abstract

Section: Important Zero-knowledge Paradigms Underlying Eficient Exoti...mentioning

confidence: 99%

A Survey on Exotic Signatures for Post-quantum Blockchain: Challenges and Research Directions

et al. 2023

View full text Add to dashboard Cite

show abstract

“…Variants of Picnic based on AES have been proposed [275]. The signature scheme Banquet [276] uses AES and achieves performance close to that of Picnic. Obtaining further improvements under the same paradigm as Picnic is an active area of research (see, for example, [277,278]) and may eventually lead to a signature scheme with significantly better performance than the current design.…”

Section: Picnicmentioning

confidence: 99%

Status report on the third round of the NIST Post-Quantum Cryptography Standardization process

Moody¹

2022

120

View full text Add to dashboard Cite

The National Institute of Standards and Technology is in the process of selecting public-key cryptographic algorithms through a public, competition-like process. The new public-key cryptography standards will specify additional digital signature, public-key encryption, and key-establishment algorithms to augment Federal Information Processing Standard (FIPS) 186-4, Digital Signature Standard (DSS), as well as NIST Special Publication (SP) 800-56A Revision 3, Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography, and SP 800-56B Revision 2, Recommendation for Pair-Wise Key Establishment Using Integer Factorization Cryptography. It is intended that these algorithms will be capable of protecting sensitive information well into the foreseeable future, including after the advent of quantum computers. The first round of the NIST Post-Quantum Cryptography Standardization Process began in December 2017 with 69 candidate algorithms that met both the minimum acceptance criteria and submission requirements. The first round lasted until January 2019, during which candidate algorithms were evaluated based on their security, performance, and other characteristics. NIST selected 26 algorithms to advance to the second round for more analysis. The second round continued until July 2020, after which seven 'finalist' and eight 'alternate' candidate algorithms were selected to move into the third round. This report describes the evaluation and selection process, based on public feedback and internal review, of the third-round candidates. The report summarizes each of the 15 third-round candidate algorithms and identifies those selected for standardization, as well as those that will continue to be evaluated in a fourth round of analysis. The public-key encryption and key-establishment algorithm that will be standardized is CRYSTALS-Kyber. The digital signatures that will be standardized are CRYSTALS-Dilithium, Falcon, and SPHINCS+. While there are multiple signature algorithms selected, NIST recommends CRYSTALS-Dilithium as the primary algorithm to be implemented. In addition, four of the alternate key-establishment candidate algorithms will advance to a fourth round of evaluation: BIKE, Classic McEliece, HQC, and SIKE. These candidates are still being considered for future standardization. NIST will also issue a new Call for Proposals for public-key digital signature algorithms to augment and diversify its signature portfolio.

show abstract

“…In this work, we investigate the security of MPC-in-the-head type zero-knowledge proofs like ZKBoo [3], Picnic [5], [8], KKW [9], and Banquet [7].…”

Section: A Our Contributionsmentioning

confidence: 99%

“…BBQ [6] and Banquet [7] continue the line of optimizations of ZKB++ and KKW and adapt their approach to work with the AES block cipher as the function for the relation to be proved, i.e. the public statement is an AES ciphertext.…”

Section: E Bbq and Banquetmentioning

confidence: 99%

See 1 more Smart Citation

Formal security analysis of MPC-in-the-head zero-knowledge protocols

Sidorenco

Oechsner

Spitters

2021

2021 IEEE 34th Computer Security Foundations Symposium (CSF)

View full text Add to dashboard Cite

Zero-knowledge proofs allow a prover to convince a verifier of the veracity of a statement without revealing any other information. An interesting class of zero-knowledge protocols are those following the MPC-in-the-head paradigm (Ishai et al., STOC '07) which use secure multiparty computation (MPC) protocols as the basis. Efficient instances of this paradigm have emerged as an active research topic in the last years, starting with ZKBoo (Giacomelli et al., USENIX '16). Zero-knowledge protocols are a vital building block in the design of privacypreserving technologies as well as cryptographic primitives like digital signature schemes that provide post-quantum security.This work investigates the security of zero-knowledge protocols following the MPC-in-the-head paradigm. We provide the first machine-checked security proof of such a protocol on the example of ZKBoo. Our proofs are checked in the EasyCrypt proof assistant. To enable a modular security proof, we develop a new security notion for the MPC protocols used in MPC-in-thehead zero-knowledge protocols. This allows us to recast existing security proofs in a black-box fashion which we believe to be of independent interest.

show abstract

Banquet: Short and Fast Signatures from AES

Cited by 34 publications

References 30 publications

A Survey on Exotic Signatures for Post-quantum Blockchain: Challenges and Research Directions

A Survey on Exotic Signatures for Post-quantum Blockchain: Challenges and Research Directions

Status report on the third round of the NIST Post-Quantum Cryptography Standardization process

Formal security analysis of MPC-in-the-head zero-knowledge protocols

Contact Info

Product

Resources

About